This third entry in our series reviewing the leading hardware bitcoin wallets on the market scrutinizes their privacy and security.

robots

twitter:card

twitter:description

What’s the Best Hardware Wallet on the Market? Part 3 - Bitcoin Magazine

twitter:title

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/11/Untitled_Artwork_4.jpg

twitter:image

Review

Bitbox

coinkite

coldcard

hardware wallets

Keepkey

Ledger

ledger nano x

Shapeshift

shift cryptosecurity

Trezor

bounty program

bug bounty program

coldcard mk3

hardware

hardware wallet

hardware wallet manufacturer

ledger

ledger nano

Bitcoin Magazine provides news, analysis, information, commentary and price data about Bitcoin.

Bitcoin Magazine

Vlad says that he's a political science graduate with a fascination for Bitcoin and free markets. His profs say he's a crazy anarchist who probably doesn't deserve his degrees. His parents say he's wasting his potential on a pipe dream.

Vlad Costea

What’s the Best Hardware Wallet on the Market? Part 3

What&rsquo;s the Best Hardware Wallet on the Market? Part 3

What&rsquo;s the Best Hardware Wallet on the Market? Part 3 page sep sitename

This is the third article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part, focused on the wallets&rsquo; physical safety and outward appearance here. Read the second part, focused on simplicity, accessibility and privacy, here. By request, samples were provided by some of the companies for review purposes. After assessing the physical sturdiness, appearance, simplicity, accessibility and privacy of five of the leading hardware bitcoin wallets on the market, it&rsquo;s time to analyze arguably the most important feature of all: security.&nbsp; There are plenty of convenient features and integrations to be found in hardware wallets, but none of them are as valuable and important as the efficiency with which they secure your bitcoin. The main expectation of the device is not to enable Bluetooth connectivity or seamlessly integrate with a trading platform, but to serve its base function of keeping coins safe and away from hackers&rsquo; malevolence. Just like a mobile phone should be able to make calls before running 3D video games, a hardware wallet is supposed to offer robust cryptographic security.&nbsp; Thankfully, the devices scrutinized in this three-part analysis are the five best options available on the market, so any security compromises in favor of extra features are minimal. Furthermore, the hardware wallets covered in this review were not arbitrarily chosen &mdash; they each benefit from the positive recommendations of bitcoin.org. In no particular order, these devices are Trezor Model T, Ledger Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s bitcoin-only BitBox02 and Coinkite&rsquo;s Coldcard Mk3. How to Assess Hardware Wallet Security In the context of hardware wallets, there are multiple types of &ldquo;security&rdquo; and many complex issues that have to be taken into consideration.&nbsp; First of all, the private keys these wallets protect should not get leaked during remote or physical attacks. They must act as a proxy which manages your keys without being exposed to the risk of malware, spyware, keyloggers, viruses or other malicious pieces of software that can infect your computer.&nbsp; Secondly, both addresses and amounts of cryptocurrency being sent during transactions must be verifiable. Each hardware wallet is endowed with a universal microcontroller which communicates with its encrypted aspects and facilitates user input &mdash; and this is the most vulnerable and tricky component of these devices. Thankfully, the new generation of hardware wallets has solved any issues with this user input by integrating easily readable screens which display all of the information required to compare with the computer or mobile phone input before validating the transaction. (But, as a general piece of advice, always check everything to be sure that your device is functioning properly and doesn&rsquo;t result in you losing your bitcoin.)&nbsp; Thirdly, it&rsquo;s important to take into account the integration of secure chips (as in the case of the Ledger Nano X, BitBox02 and Coldcard) and the ease with which users can create a multisig security model (the Trezor Model T and Coldcard are the champions in that field). Fourthly, it&rsquo;s essential to reduce the attack surface by creating a Bitcoin-only firmware. Some manufacturers take this feature very seriously, and the fact that you can&rsquo;t glitch the software due to the inclusion of altcoins can make a lot of difference in security. As scarce digital commodities, your bitcoin require uncompromising security.&nbsp; The use of open-source software and native SegWit (bech32) addresses are also criteria for security and privacy. The former enables easier audits by security experts and quicker fixes, while the latter reduces transaction fees and grants access to CoinJoins via Wasabi Wallet.&nbsp; Furthermore, it&rsquo;s important to check if the hardware wallet manufacturer enables bounty programs for bug disclosures. The existence of a clear, financial incentive for the discovery of various security issues attracts ethical hackers who may bring significant contributions and ultimately add to security. Last but not least, a price comparison will be presented. Sometimes the &ldquo;you get what you pay for&rdquo; principle applies and, in this context, it&rsquo;s important to introduce cost as an extra metric for security. So, here are the sections you can expect to find in this final entry in this series: History of hacks. The presence of secure chips. The difficulty of setting up multisig. The option of a bitcoin-only device. The use of open-source software. Support for bech32. Use of bug bounty programs. Price. 1. History of Hacks Historically speaking, every hardware wallet manufacturer has encountered issues with hackers and exploits. No design is perfect and absolute security from hacks is virtually impossible. The golden rule when it comes to hardware wallets is to treat them the same way you would treat paper wallets: Make sure that nobody gets physical access. For more information on physical security, please refer to the first article in this series. This section is based on the findings of Wallet.fail, white hat hackers Dmitry Nedospasov, Josh Datko and Thomas Roth, as well as independent researchers Saleem Rashid, Sergei Volokitin, LazyNinja, TheCharlatan, Kaspar Etter and Reddit user De_Wilde_Weldoener. Furthermore, it should be noted that all of the issues presented have been fixed by the hardware wallet manufacturers and that the findings serve as a reminder that no device is perfect and should always be physically protected. Trezor During its 35C3 presentation in December 2018, the team members of the Wallet.fail project presented multiple issues with the Ledger and Trezor hardware wallets. Most notably, Roth was able to extract the seed phrases and PIN from a Trezor One, while his collaborator Nedospasov introduced a prototype for the &ldquo;Trezor Glitcher&rdquo; &mdash; a device which instantly exploits the vulnerabilities of Trezor hardware wallets. The issue they exploited was that private keys were being moved in the RAM during software upgrades, and a fix was released 62 days later with version 1.8.0 of the firmware. Trezor&rsquo;s devices were also found to be vulnerable in August 2017, as explained by security enthusiast Doshay Zero404Cool in an extensive blog post. Basically, the author identified vulnerability issues with the ST32F05 chip (which is used in the Trezor Model T and the KeepKey). Saleem Rashid has also written an article which explains all of the technical intricacies involved, and Trezor fixed the issue eight days later with firmware update 1.5.2. These are only two of the most notable examples of security issues with Trezor hardware wallets, which have been identified and fixed over the last couple of years. However, it&rsquo;s this openness and willingness to constantly solve security issues that makes Trezor a trusted, device manufacturer. The large community and the numerous security experts who constantly scrutinize the hardware and software developed by Trezor are one of its most important security guarantees and the reason why Trezor is still the industry standard for hardware wallets. Ledger From a design perspective, Ledger&rsquo;s hardware wallets are the exact opposite of Trezor&rsquo;s: They rely on a secure element chip which acts as a closed-source blackbox and aren&rsquo;t as open about security. Its bounty program webpage doesn&rsquo;t contain a list of fixed issues but only mentions bug submission criteria and procedures, as well as the company&rsquo;s &ldquo;Wall of Fame.&rdquo; Before the new Nano X model was launched in the second quarter of 2019, Ledger&rsquo;s Nano S has been subjected to two significant and well-documented exploits. Firstly, Rashid reported a security issue in November 2017, which Ledger patched four months later. More specifically, the architecture of the microcontroller unit (which communicates with the buttons, screen and USB port) could be tweaked to run a custom firmware which tricks the secure element chip.&nbsp; In December 2018, the Wallet.fail team also managed to successfully launch a compromising attack on the Ledger Nano S, which allowed it to run the video game Snake on the device. It was a way for it to prove that the physical design is flawed and anybody can install malevolent software which bypasses the initial verification process and might be able to redirect the funds to another address. This demonstration was most likely a rebuttal to the famous statement made by Ledger co-founder BTChip, who tweeted support of the idea that Ledger devices are so secure that they can have their software reset and be sold to other users. In May 2019, the Wallet.fail team identified a lack of memory protections in the STM32WB55 chip from the Ledger Nano X, and it&rsquo;s still unclear if the issue was fixed by a firmware update. As a company, Ledger isn&rsquo;t as transparent as Trezor and oftentimes doubles down on issues as intentional design choices (both Rashid and the Wallet.fail team have encountered communication issues). Therefore, purchasing any Ledger device implies trusting the company&rsquo;s security model to a degree that isn&rsquo;t necessarily compatible with the cypherpunk spirit of open-source software. KeepKey From a hardware and firmware perspective, the KeepKey is very similar to the Trezor Model T. The only major differences can be found in the enclosure (which is more premium in the case of the KeepKey), the design and architecture, and the software of choice (which ShapeShift has modified to fit its business philosophy). In April 2019, Sergei Volokitin managed to take advantage of a design flaw in order to glitch the KeepKey. As he explains in his OffensiveCon19 presentation, Volokitin was able to successfully run an injection attack which glitched the device in less than five minutes and made it susceptible to the installation of custom, malevolent software. The conclusion drawn referred to the board design and choice of chips, as the microcontroller is not made to resist such attacks. Also, the large number of...

What’s the Best Hardware Wallet on the Market? Part 3 page sep sitename

description

max-snippet:-1, max-image-preview:large, max-video-preview:-1

twitter:creator

This hardware bitcoin wallet review tests the simplicity, software, verification, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2 - Bitcoin Magazine

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/11/Untitled_Artwork_3.jpg

Privacy &amp; security

electrum personal

electrum personal server

electrum personal server and wasabi

financial sovereignty

full node

model t

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market? Part 2

This hardware bitcoin wallet review tests software, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Best Hardware Wallet on the Market Review Part 2 page sep sitename

This is the second article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part here. By request, samples were provided by some of the companies for review purposes. There are multiple reasons why the user interface recommended, developed or provided by hardware wallet manufacturers is important.&nbsp; First of all, depending on the nature of this visual interaction, users get various degrees of privacy and security. For example, websites and browser plug-ins are convenient but very risky and vulnerable to malware and phishing attacks; proprietary software installed on the hard drive is excellent but may leak some data to the company server; and integrations with your full node via Bitcoin Core, the Electrum Personal Server or Wasabi are ideal because they enable complete sovereignty and maximum privacy.&nbsp; For the purpose of promoting a particularly safe way of storing and sending bitcoin, this review will intentionally exclude internet browser plug-ins and webpages (unless they are the only official way to access the wallet). These features are nice to have, but they are susceptible to third-party attacks and, therefore, may pose a threat to users&rsquo; security and data privacy. Instead, the focus will be on software clients that operate on the users&rsquo; computers, with a focus on minimizing interactions with the company&rsquo;s servers and maximizing sovereignty with full nodes. Secondly, since visual interfaces determine the overall user friendliness and ease of use for hardware wallets, they also represent an important factor for mass adoption and retail success. To nontechnical users, the official UI/UX is the only way through which they will ever experience their hardware wallet. Therefore, it&rsquo;s important to take into account the software&rsquo;s simplicity of use and whether or not it&rsquo;s available on multiple platforms. Thirdly, visual interfaces may also include extra features and integrations that simplify other activities such as buying bitcoin and exchanging it for fiat or altcoins. While accessing these services is not recommended for HODLers who are concerned about their privacy, some of these options may come in handy for traders and everyday users.&nbsp; Just as in the previous part of this analysis, the five hardware wallets under scrutiny for this review are Trezor&rsquo;s Model T, Ledger&rsquo;s Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s BitBox02 and Coinkite&rsquo;s Coldcard Wallet Mk3. Given the criteria described above, the rest of the article will be split into five sections:&nbsp; Simplicity of use. Multi-platform software. Extra verification steps&nbsp;Unique features. Privacy. Hopefully, the results of this review will help determine the best hardware wallet choice for each user type. 1. Simplicity of Use Writing down the seed phrase, verifying some designated words on the hardware wallet&rsquo;s screen (or all of them, depending on the product&rsquo;s design) and setting up some kind of backup are all part of the exciting (yet slightly frightening) phase of getting immersed in financial sovereignty. The thought that, unlike in traditional finance, you cannot recover funds that you lose by mistake can sometimes be overwhelming. In this regard, simplicity really matters and good interfaces can make a lot of difference in the process of attaining financial sovereignty. As you are about to discover, the test includes four newbie-friendly devices and one power-user product that benefits from massive community support &mdash; but still requires a good understanding of operation security fundamentals and Bitcoin essentials for use. Simplicity of Use: Trezor Model T The web-based Trezor Wallet is the industry standard for hardware wallet user interfaces. The Trezor Model T uses the Trezor Bridge client software to facilitate communication between the hardware wallet and a computer. This application is a hybrid in that it requires installation but still runs in your browser.&nbsp; The installation is straightforward and easy; it teaches new users how to validate each operation on the device and introduces the concept of a recovery seed in a comprehensive way. The software also encourages the creation of backups and makes use of a familiar account and password system. After the initial setup is complete, everything is straightforward and clean: Users can send or receive bitcoin but also receive suggestions for nearby ATMs and exchanges where they can buy bitcoin.&nbsp; Trezor is the world&rsquo;s first hardware wallet manufacturer and all units reviewed in this test are more or less inspired by its designs and specifications. Thanks to its first-mover advantage and long-time popularity, every Trezor product has a lot of community support. In this regard, users will find that they can connect their Model Ts to the Electrum Web Server, Wasabi Wallet, Exodus and even ShapeShift.&nbsp; Some of these alternative options will grant more privacy and sovereignty, while others bring convenience through extra features. Overall, the experience is the industry standard for onboarding users to financial sovereignty and is worthy of a 10 out of 10 rating. Simplicity of Use: Ledger Nano X Ledger Live is a clean, simple and feature-packed local client which adds functionality to the Nano X. Conversely, the Ledger Nano X makes use of a local application called Ledger Live. What sets it apart from Trezor Bridge is the fact that the software installation takes place locally on your hard drive, so you can check your balance even when you&rsquo;re not connected to the internet (assuming that the data had been updated) and benefit from slightly improved privacy. Also, the app serves the purpose of checking the authenticity of the hardware wallet by interacting with the internal secure element. It still doesn&rsquo;t replace a full node or Wasabi synchronization, but it&rsquo;s a superior experience as compared to a webpage.&nbsp; Ledger Live is very intuitive and the installation process is basically a tutorial which teaches users about the device&rsquo;s basic functionality. After it&rsquo;s generated, the seed phrase needs to be validated word-by-word on the device for extra safety. At the end of the setup, each cryptocurrency application needs to be installed individually &mdash; so users can choose not to increase the attack surface with extra features by making the Nano X a BTC-only device.&nbsp; The interface also features a &ldquo;Buy Crypto&rdquo; menu which allows users to quickly buy bitcoin locally or exchange them for other cryptocurrencies via ShapeShift or Changelly.&nbsp; Correspondingly, the experience deserves a perfect-10 rating. Simplicity of Use: KeepKey The ShapeShift interface is clean, feature-packed and compatible with the KeepKey and the Trezor hardware wallets (Ledger will also be added). As a product of the parent company, KeepKey is seamlessly integrated with the ShapeShift Platform. New users are greeted by a familiar, simple and feature-packed interface which includes options to buy, send, receive and trade your bitcoin. Interestingly, this platform is designed to also support Trezor hardware wallets and plans to integrate functionality for Ledger products. In this regard, it seems like ShapeShift is trying to provide a software alternative to the dedicated user interfaces developed and provided by competing manufacturers. KeepKey also has Client, a barebones desktop application which allows users to check, send and receive BTC, and to connect to the ShapeShift website. It&rsquo;s basic and limited in functionality but may provide a more privacy-friendly experience for those who don&rsquo;t want to sign up to the ShapeShift platform. Speaking of alternative software, it should also be mentioned that, unlike the Ledger Nano X, the Trezor Model T and the Coldcard (all versions), there is no KeepKey compatibility with Wasabi Wallet. Luckily, ShapeShift&rsquo;s device works just fine with the Electrum Personal Server and can connect to full nodes running Bitcoin Core 0.18 or newer.&nbsp; KeepKey is excellent in its simplicity of use and deserves praise for also integrating rival manufacturers on the platform. However, it should be noted that the lack of compatibility with Wasabi Wallet is possibly the biggest current downside. Simplicity of Use: BitBox02 Under the &ldquo;Expert Settings&rdquo; menu, the BitBoxApp has two unique features: coin control and full node connectivity. Last but certainly not least, the BitBox02 offers a competitive alternative with the BitBoxApp. The installation experience is very similar to the one created by Ledger. However, there are two options which set the BitBox02 apart: It enables coin control (as opposed to merging UTXOs together, users get to choose from which amount they&rsquo;re sending, so that financial privacy gets protected), and it allows a seamless pairing with a local full node.&nbsp; Both of these features empower users with privacy and sovereignty in a comprehensive and straightforward interface. Basically, Shift Cryptosecurity&rsquo;s product is the middle ground between the Trezor and the Coldcard: It offers some power-user features while also keeping it basic. Also, the in-app guide, positioned on the right sidebar of the BitBoxApp, makes it simple to run the setup, even for newbies. Overall, the BitBox02 has a great, basic interface which somehow manages to integrate some advanced features that users who appreciate financial sovereignty will find useful. It doesn&rsquo;t include all of the trading features found in the KeepKey, nor does it have in-app access to a series of third-party exchange services as the Ledger and Trezor do, but it gets privacy and sovereignty right without overcomplicating matters.&nbsp; The BitBox02&rsquo;s intuitive onboarding also receives a perfect-10 rating for making power-user features simple.&nbsp;&nbsp; Simplicity of Use: Coldcard Wallet Mk3 For maximum privacy and financial sovereignty, Coldcard is designed to work with Wasabi Wallet and the Electrum Personal Server. Contrary to market trends, the Coldcard hardware wallet doesn&rsquo;t have a dedicated software client which...

In this video review, Bitcoin Magazine tests Coinkite’s Coldcard Mk3 hardware wallet, assessing its user experience, security measures and more.

Video Review: Coldcard Mk3 - Bitcoin Magazine

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/11/bitcoin-magazine-unbox-coldcard.png

Video

allows

bip 174

bitcoin

bitcoin hardware

bitcoin magazine

bitcoin wallet

<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://youtu.be/fkEZWhnxBBI
</div></figure>



In the video above, Bitcoin Magazine reviewed Coinkite’s Coldcard Mk3 bitcoin hardware wallet, evaluating it with a handful of important criteria, including coin control, UTXO selection, Lightning support and more.



<h2>Appearance and Feel</h2>



As the second version of Coinkite’s hardware wallet, the Mk3 feels almost identical to the earlier model. It features the same full-sized numeric keypad that you would find on a calculator, which, when applied to a bitcoin wallet, feels very convenient in contrast to clicking the same two buttons to confirm actions (often found on other hardware wallets). A notable design feature of the Coldcard Mk3 is the clear plastic casing that highlights the inner workings of the device. This, in my opinion, gives it a really unique, cypherpunk-esque feel.&nbsp;



<h2>Security and Usage</h2>



The Coldcard can be used by itself without the need to connect to a computer. This means that you can use the Mk3 in an air gapped fashion, which can be a huge plus in the eyes of a security-driven bitcoin user. This is possible thanks to the microSD slot built into the side of the wallet — you can pass along transaction (and other) information to and from a computer by simply putting the chip into the computer and then back into the wallet.&nbsp;



In terms of security, the Mk3 uses Microchip's ATECC608A to store the critical master secret: the 24-word seed phrase for your BIP 32/BIP 39 wallet.&nbsp;



“This little chip is very powerful,” Coldcard states on its website. “Communication is controlled by complex challenges and SHA-256 responses which prevent replay and eavesdropping. The secure element enforces cryptographically, that the attacker must know the PIN to access the secrets. An attacker cannot brute-force combinations or replay a previous login sequence.”



One of the most important features of the Coldcard is that it is based on BIP 174, which is a proposal in Bitcoin that allows for interoperation between bitcoin hardware wallets by introducing a binary file format that all hardware wallets can use. BIP 174 support also means that you can use the Coldcard with Bitcoin Core, Electrum Wallet, Wasabi or any software that supports BIP 174.&nbsp;



This is one of my favorite features about the Coldcard, because it provides users with the freedom to choose how they want to use their bitcoin wallet. In October 2019, Coinkite also <a href="https://twitter.com/COLDCARDwallet/status/1181658052031848448">released a software update</a> that allows users to view receive addresses on the screen of the Coldcard or save to an SD card in a simple text format.&nbsp;



Another neat security feature of the Coldcard is its “duress wallet,” which can be thought of as a decoy wallet with a separate amount of funds for use in the event of an attempted bitcoin heist. The wallet allows you to set up a “duress PIN code,” which is an alternative PIN that displays an entirely separate wallet that a user can pretend is their real one. Ideally, this wallet should have a small amount of bitcoin on it, enough to make it plausible that this is indeed all of the bitcoin they have. Also, because Coldcard supports BIP 39 passphrases, users can create an unlimited supply of distraction wallets.



Overall, the Coldcard Mk3 is a solid bitcoin wallet for any user, be they beginner or expert. Using the Coldcard allows a user to feel like they are interacting with bitcoin transactions in a very hands-on manner, which is a credit to its tech-y outer appearance, 128 by 64 pixel OLED screen that shows you all of the critical details of your transaction and the full-sized keypad that is accompanied by a solid “click” with every press.&nbsp;



Bitcoin Magazine is an official affiliate partner of Coldcard, so the Coldcard is available for sale online at <a href="https://store.b.tc/products/coldcard-mk3-bitcoin-hardware-walelt">store.b.tc</a>.This is an editorial hardware review by Bitcoin Magazine. All opinions expressed are the writer’s own without express approval or input from the manufacturer.

Michael is an associate at BTC Media who is passionate about the rise of Bitcoin and the downfall of the largest fiscal experiment in human history.

Michael Taiberg

Video Review: Coldcard Mk3

In this video review, Bitcoin Magazine tests Coinkite&rsquo;s Coldcard Mk3 hardware wallet, assessing its user experience, security measures and more.

Video Review: Coldcard Mk3 Hardware Wallet page sep sitename

https://youtu.be/fkEZWhnxBBI In the video above, Bitcoin Magazine reviewed Coinkite&rsquo;s Coldcard Mk3 bitcoin hardware wallet, evaluating it with a handful of important criteria, including coin control, UTXO selection, Lightning support and more. Appearance and Feel. As the second version of Coinkite&rsquo;s hardware wallet, the Mk3 feels almost identical to the earlier model. It features the same full-sized numeric keypad that you would find on a calculator, which, when applied to a bitcoin wallet, feels very convenient in contrast to clicking the same two buttons to confirm actions (often found on other hardware wallets). A notable design feature of the Coldcard Mk3 is the clear plastic casing that highlights the inner workings of the device. This, in my opinion, gives it a really unique, cypherpunk-esque feel.&nbsp; Security and Usage. The Coldcard can be used by itself without the need to connect to a computer. This means that you can use the Mk3 in an air gapped fashion, which can be a huge plus in the eyes of a security-driven bitcoin user. This is possible thanks to the microSD slot built into the side of the wallet &mdash; you can pass along transaction (and other) information to and from a computer by simply putting the chip into the computer and then back into the wallet.&nbsp; In terms of security, the Mk3 uses Microchip&#039;s ATECC608A to store the critical master secret: the 24-word seed phrase for your BIP 32/BIP 39 wallet.&nbsp; &ldquo;This little chip is very powerful,&rdquo; Coldcard states on its website. &ldquo;Communication is controlled by complex challenges and SHA-256 responses which prevent replay and eavesdropping. The secure element enforces cryptographically, that the attacker must know the PIN to access the secrets. An attacker cannot brute-force combinations or replay a previous login sequence.&rdquo; One of the most important features of the Coldcard is that it is based on BIP 174, which is a proposal in Bitcoin that allows for interoperation between bitcoin hardware wallets by introducing a binary file format that all hardware wallets can use. BIP 174 support also means that you can use the Coldcard with Bitcoin Core, Electrum Wallet, Wasabi or any software that supports BIP 174.&nbsp; This is one of my favorite features about the Coldcard, because it provides users with the freedom to choose how they want to use their bitcoin wallet. In October 2019, Coinkite also released a software update that allows users to view receive addresses on the screen of the Coldcard or save to an SD card in a simple text format.&nbsp; Another neat security feature of the Coldcard is its &ldquo;duress wallet,&rdquo; which can be thought of as a decoy wallet with a separate amount of funds for use in the event of an attempted bitcoin heist. The wallet allows you to set up a &ldquo;duress PIN code,&rdquo; which is an alternative PIN that displays an entirely separate wallet that a user can pretend is their real one. Ideally, this wallet should have a small amount of bitcoin on it, enough to make it plausible that this is indeed all of the bitcoin they have. Also, because Coldcard supports BIP 39 passphrases, users can create an unlimited supply of distraction wallets. Overall, the Coldcard Mk3 is a solid bitcoin wallet for any user, be they beginner or expert. Using the Coldcard allows a user to feel like they are interacting with bitcoin transactions in a very hands-on manner, which is a credit to its tech-y outer appearance, 128 by 64 pixel OLED screen that shows you all of the critical details of your transaction and the full-sized keypad that is accompanied by a solid &ldquo;click&rdquo; with every press.&nbsp; Bitcoin Magazine is an official affiliate partner of Coldcard, so the Coldcard is available for sale online at store.b.tc.This is an editorial hardware review by Bitcoin Magazine. All opinions expressed are the writer&rsquo;s own without express approval or input from the manufacturer.

Michael is an associate at BTC Media who is passionate about the rise of Bitcoin and the downfall of the largest fiscal experiment in human history. You can follow him on Twitter @taiberg.

Coinkite CEO Rodolfo Novak (aka NVK) talks about his Bitcoin-only hardware wallets, Coldcard and the Opendime, and the market demand for them.

Video: Rodolfo Novak on Coldcard and Opendime - Bitcoin Magazine

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/09/Untitled_Artwork.jpg

Opendime

rodolfo novak

bitcoin market

cold storage

coldcard wallet

devices

hardware wallet manufacturers

Rodolfo Novak (also known as <a href="https://twitter.com/nvk">NVK</a>) is a bona fide representative of the so-called “toxic Bitcoin maximalist” culture. And as an early BTC adopter, he is very much aware of the various security threats involved in holding desirable and scarce digital assets whose transactions are irreversible. Correspondingly, after becoming disillusioned with hardware wallet manufacturers such as Ledger and Trezor, he decided to follow the cypherpunk DIY ethos and joined the free Bitcoin market with products of his own.



The two cold storage solutions that Novak has introduced, Coldcard Wallet and <a href="https://bitcoinmagazine.com/articles/physical-bitcoins-our-hands-end-end-review-opendime">Opendime</a>, are genuine labors of love. As the <a href="https://coinkite.com/">Coinkite</a> CEO likes to say, he built the devices to suit his own needs for financial sovereignty and then sought ways to manufacture them at a greater scale.



During the 2019 edition of the Baltic Honeybadger Conference, Novak agreed to sit down and talk about the latest versions of his hardware wallets: Coldcard MK3 and Opendime V4.



<h2>Keeping Your Bitcoin Secure</h2>



“We all have reasonably similar needs for keeping bitcoins secure,” said Novak, before diving into specific product details. The Opendime was designed to be a “bearer instrument,” a physical means of payment that can be used even by people who don’t understand Bitcoin. At its core, it’s a USB stick which includes cryptographic software to store and secure BTC. Interestingly, the Opendime is the device that powers the reverse-skeuomorphic <a href="https://bitcoinmagazine.com/articles/bitpiggys-helps-children-stack-satoshis-learn-financial-responsibility">BitPiggies</a>.&nbsp;



On the other hand, Coldcard Wallets are much more complicated items that can be used to sign transactions while keeping the private keys offline and away from the prying eyes of hackers. Thanks to its use of <a href="https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki">BIP 174</a> (which standardizes partially-signed bitcoin transactions), the hardware wallet can operate without ever being connected to the internet. Its latest iteration, the MK3, has received both physical and software improvements, and is becoming the go-to Bitcoin-only device for those who take security very seriously.



<h2>“We Want to Serve the Market Without Exposing It to Security Holes”</h2>



In Novak’s view, Ledger’s hardware wallets can’t be trusted due to their closed-source approach to software development, while Trezor’s devices have proven themselves to be physically vulnerable to hackers (most notably, during the <a href="https://youtu.be/Y1OBIGslgGM">Wallet.Fail presentations</a>).&nbsp;



On the other hand, Novak is aware that his products only serve a niche of power users who accept no compromises when it comes to the security of their coins. As he explains throughout the interview, the marketing power of his company is limited and the number of people who display interest in a BTC-only device is likewise small. Nonetheless, Novak seems happy about the success of his endeavor and implies that at least the Coldcard Wallet will constantly receive updates to keep up with the needs of bitcoiners (from Schnorr signatures and <a href="https://bitcoinmagazine.com/articles/taproot-coming-what-it-and-how-it-will-benefit-bitcoin">Taproot</a> smart contracts, to confidential transactions).&nbsp;



As the Bitcoin market matures, it’s going to be interesting to see which hardware wallet manufacturers truly thrive and how security develops in the space. The only certainty is that competition is always useful to develop better products, as the attack surface and vulnerabilities for cold storage devices should constantly get reduced. 



For more information about the Coldcard Wallet, listen to the entire interview and check out <a href="https://coldcardwallet.com/">the technical specifications</a> on its official website.

Video: Rodolfo Novak on Coldcard and Opendime

Video: Rodolfo Novak on Coldcard and Opendime page sep sitename

Rodolfo Novak (also known as NVK) is a bona fide representative of the so-called &ldquo;toxic Bitcoin maximalist&rdquo; culture. And as an early BTC adopter, he is very much aware of the various security threats involved in holding desirable and scarce digital assets whose transactions are irreversible. Correspondingly, after becoming disillusioned with hardware wallet manufacturers such as Ledger and Trezor, he decided to follow the cypherpunk DIY ethos and joined the free Bitcoin market with products of his own. The two cold storage solutions that Novak has introduced, Coldcard Wallet and Opendime, are genuine labors of love. As the Coinkite CEO likes to say, he built the devices to suit his own needs for financial sovereignty and then sought ways to manufacture them at a greater scale. During the 2019 edition of the Baltic Honeybadger Conference, Novak agreed to sit down and talk about the latest versions of his hardware wallets: Coldcard MK3 and Opendime V4. Keeping Your Bitcoin Secure &ldquo;We all have reasonably similar needs for keeping bitcoins secure,&rdquo; said Novak, before diving into specific product details. The Opendime was designed to be a &ldquo;bearer instrument,&rdquo; a physical means of payment that can be used even by people who don&rsquo;t understand Bitcoin. At its core, it&rsquo;s a USB stick which includes cryptographic software to store and secure BTC. Interestingly, the Opendime is the device that powers the reverse-skeuomorphic BitPiggies.&nbsp; On the other hand, Coldcard Wallets are much more complicated items that can be used to sign transactions while keeping the private keys offline and away from the prying eyes of hackers. Thanks to its use of BIP 174 (which standardizes partially-signed bitcoin transactions), the hardware wallet can operate without ever being connected to the internet. Its latest iteration, the MK3, has received both physical and software improvements, and is becoming the go-to Bitcoin-only device for those who take security very seriously. &ldquo;We Want to Serve the Market Without Exposing It to Security Holes&rdquo; In Novak&rsquo;s view, Ledger&rsquo;s hardware wallets can&rsquo;t be trusted due to their closed-source approach to software development, while Trezor&rsquo;s devices have proven themselves to be physically vulnerable to hackers (most notably, during the Wallet.Fail presentations).&nbsp; On the other hand, Novak is aware that his products only serve a niche of power users who accept no compromises when it comes to the security of their coins. As he explains throughout the interview, the marketing power of his company is limited and the number of people who display interest in a BTC-only device is likewise small. Nonetheless, Novak seems happy about the success of his endeavor and implies that at least the Coldcard Wallet will constantly receive updates to keep up with the needs of bitcoiners (from Schnorr signatures and Taproot smart contracts, to confidential transactions).&nbsp; As the Bitcoin market matures, it&rsquo;s going to be interesting to see which hardware wallet manufacturers truly thrive and how security develops in the space. The only certainty is that competition is always useful to develop better products, as the attack surface and vulnerabilities for cold storage devices should constantly get reduced. For more information about the Coldcard Wallet, listen to the entire interview and check out the technical specifications on its official website.

Tags

coldcard

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 3

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2

Video Review: Coldcard Mk3

Video Interview: Rodolfo Novak on the Coldcard Wallet and Opendime